RSBots.net, autofighter.org... they are all just repackaged neXus.
NeXus is still how it's always been, and it's just as easy to crack now as it was when I was cracking the bot for RSCBUnlocked. Only issue is, now scripts have authcodes. I have yet to write deobfuscators for neXus (I used to have them... but I lost them

It stripped Allatori flow obfuscation, Allatori string encryption (a("df$T%$Rg") -> "wooooooo"), and inlined the Jshrink string pool interface calls (I.I(offset) -> "df$T%$Rg"), so I'm not quite sure if this is exactly what it does, but ruler isn't all too clever so the system probably works like this:
http://rscheata.net/nexusauth/download.php?authcode=<auth>
It probably queries a database with something like
SELECT file_name FROM bundles WHERE authcode=<$_GET['auth']>
And then writes the file named file_name to the stream. There are two ways off the top of my head that you could tackle this. The first being bruteforce of authorization codes, the second being... I'll let you figure out the rest.